Red Hat OpenShift: Mehrere Schwachstellen ermöglichen Denial of Service

Summary

Product

Vulnerabilities 2

• Unscored —
  CVE-2021-41771

  Panic on invalid symbol tables in debug/macho

  ImportedSymbols in debug/macho (for Open or OpenFat) in Go before 1.16.10 and 1.17.x before 1.17.3 Accesses a Memory Location After the End of a Buffer, aka an out-of-bounds slice situation.

  golang go stdlib golang-1.8 Debian Ubuntu Azure Linux Alpine Go
  Nov 8, 2021
• Unscored —
  CVE-2021-41772

  Panic when opening certain archives in archive/zip

  Go before 1.16.10 and 1.17.x before 1.17.3 allows an archive/zip Reader.Open panic via a crafted ZIP archive containing an invalid name or an empty filename field.

  golang go stdlib golang-1.8 Ubuntu Azure Linux Alpine Go
  Nov 8, 2021

Revision history

1. 2023-02-20 #5

   Neue Updates von Red Hat aufgenommen

2. 2022-08-09 #4

   Neue Updates von Gentoo aufgenommen

3. 2022-05-10 #3

   Neue Updates von Red Hat aufgenommen

4. 2022-05-09 #2

   Neue Updates von Red Hat aufgenommen

5. 2022-05-08 #1

   Initiale Fassung

References

• Red Hat Security Advisory RHSA-2023:0769 vom 2023-02-21
  https://access.redhat.com/errata/RHSA-2023:0769
• Red Hat Security Advisory vom 2022-05-08
  https://access.redhat.com/errata/RHSA-2022:1745
• Red Hat Security Advisory RHSA-2022:1747 vom 2022-05-10
  https://access.redhat.com/errata/RHSA-2022:1747
• Red Hat Security Advisory RHSA-2022:1819 vom 2022-05-10
  https://access.redhat.com/errata/RHSA-2022:1819
• Gentoo Linux Security Advisory GLSA-202208-02 vom 2022-08-09
  https://security.gentoo.org/glsa/202208-02